Skip to content
This repository has been archived by the owner on May 26, 2023. It is now read-only.

Bump json5, babel-plugin-module-resolver, html-webpack-plugin and webpack #551

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 7, 2023

Bumps json5 to 2.2.3 and updates ancestor dependencies json5, json5, babel-plugin-module-resolver, html-webpack-plugin and webpack. These dependencies need to be updated together.

Updates json5 from 2.1.3 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

v2.2.0

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Commits
  • c3a7524 2.2.3
  • 94fd06d docs: update CHANGELOG for v2.2.3
  • 3b8cebf docs(security): use GitHub security advisories
  • f0fd9e1 docs: publish a security policy
  • 6a91a05 docs(template): bug -> bug report
  • 14f8cb1 2.2.2
  • 10cc7ca docs: update CHANGELOG for v2.2.2
  • 7774c10 fix: add proto to objects and arrays
  • edde30a Readme: slight tweak to intro
  • 97286f8 Improve example in readme
  • Additional commits viewable in compare view

Updates json5 from 1.0.1 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

v2.2.0

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Commits
  • c3a7524 2.2.3
  • 94fd06d docs: update CHANGELOG for v2.2.3
  • 3b8cebf docs(security): use GitHub security advisories
  • f0fd9e1 docs: publish a security policy
  • 6a91a05 docs(template): bug -> bug report
  • 14f8cb1 2.2.2
  • 10cc7ca docs: update CHANGELOG for v2.2.2
  • 7774c10 fix: add proto to objects and arrays
  • edde30a Readme: slight tweak to intro
  • 97286f8 Improve example in readme
  • Additional commits viewable in compare view

Updates babel-plugin-module-resolver from 4.0.0 to 5.0.0

Changelog

Sourced from babel-plugin-module-resolver's changelog.

5.0.0 (2023-01-09)

⚠ BREAKING CHANGES

  • Remove support for Node < 16

  • Update dependencies and find-babel-config to fix json5 vulnerabilities (#441) (c43e71c)

4.1.0 (2020-12-15)

Features

Commits
  • ff8a445 chore(release): 5.0.0
  • c43e71c chore: Update dependencies and find-babel-config to fix json5 vulnerabilities...
  • f2daf06 docs: Valid install commands when using Github copy button (#426)
  • f533cc2 chore(release): 4.1.0
  • 57c53c3 chore: Run CI on node >= 10
  • 91c053c chore: Update husky & lint-staged
  • 2a14940 chore: Update standard-version to v9.0.0
  • facf14c feat: Add new jest methods (#419)
  • a3eba3a chore(deps): bump ini from 1.3.5 to 1.3.8 (#418)
  • e4a1165 docs: update readme to include Intellij / Webstorm workaround for resolving a...
  • Additional commits viewable in compare view

Updates html-webpack-plugin from 2.30.1 to 5.5.1

Changelog

Sourced from html-webpack-plugin's changelog.

5.5.1 (2023-04-15)

Bug Fixes

  • perf: defer loading of pretty-error to improve startup time (#1789) (988709d)

5.5.0 (2021-10-25)

Features

  • Support type=module via scriptLoading option (1e42625), closes #1663

5.4.0 (2021-10-15)

Features

5.3.2 (2021-06-22)

Bug Fixes

  • update lodash and pretty error (9c7fba0

5.3.1 (2021-03-09)

Bug Fixes

  • remove loader-utils from plugin core (82d0ee8)

5.3.0 (2021-03-07)

Features

  • allow to modify the interpolation options in webpack config (d654f5b)
  • drop loader-utils dependency (41d7a50)

5.2.0 (2021-02-19)

Features

5.1.0 (2021-02-12)

... (truncated)

Commits
  • 706a160 chore(release): 5.5.1
  • 988709d fix(perf): defer loading of pretty-error to improve startup time (#1789)
  • d5ce5a8 Update README.md
  • 2e3ffbf Added strict-csp to the list of plugins
  • 9c9786a chore: update workflow configuration
  • 873d75b chore(release): 5.5.0
  • ddeb774 chore: update examples
  • 1e42625 feat: Support type=module via scriptLoading option
  • 7d3645b Bump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-3807
  • 79be779 [chore] changes actions to run on pull_requests
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for html-webpack-plugin since your current version.


Updates webpack from 3.12.0 to 5.82.0

Release notes

Sourced from webpack's releases.

v5.82.0

New Features

Bug Fixes

Tests & Contributor Experience

Developer Experience

Dependencies & Maintenance

New Contributors

Full Changelog: webpack/webpack@v5.81.0...v5.82.0

v5.81.0

New Features

... (truncated)

Commits
  • 1018ca8 5.82.0
  • 0023a8f Merge pull request #17118 from webpack/fix-do-not-parse-broken-import
  • ddb9627 Merge pull request #16990 from Zlatkovsky/zlatkovsky/trusted-types-options
  • ffcb480 Merge pull request #17115 from webpack/fix-css-nested-output
  • 12d477d Merge pull request #17107 from webpack/some-types
  • 75b9e76 Merge pull request #17116 from webpack/fix-hash-in-url
  • 4fb73da Merge pull request #16945 from snitin315/feat/url-deps-mf
  • 83d14b1 Merge remote-tracking branch 'origin/main' into zlatkovsky/trusted-types-options
  • b471a6b Merge pull request #17113 from burhanuday/feat/update-types-extends
  • c67b17b Updated "Defaults.unittest.js"
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by thelarkinn, a new releaser for webpack since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…pack

Bumps [json5](https://github.com/json5/json5) to 2.2.3 and updates ancestor dependencies [json5](https://github.com/json5/json5), [json5](https://github.com/json5/json5), [babel-plugin-module-resolver](https://github.com/tleunen/babel-plugin-module-resolver), [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) and [webpack](https://github.com/webpack/webpack). These dependencies need to be updated together.


Updates `json5` from 2.1.3 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.1.3...v2.2.3)

Updates `json5` from 1.0.1 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.1.3...v2.2.3)

Updates `babel-plugin-module-resolver` from 4.0.0 to 5.0.0
- [Changelog](https://github.com/tleunen/babel-plugin-module-resolver/blob/master/CHANGELOG.md)
- [Commits](tleunen/babel-plugin-module-resolver@v4.0.0...v5.0.0)

Updates `html-webpack-plugin` from 2.30.1 to 5.5.1
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](jantimon/html-webpack-plugin@v2.30.1...v5.5.1)

Updates `webpack` from 3.12.0 to 5.82.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v3.12.0...v5.82.0)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
- dependency-name: json5
  dependency-type: indirect
- dependency-name: babel-plugin-module-resolver
  dependency-type: direct:production
- dependency-name: html-webpack-plugin
  dependency-type: direct:production
- dependency-name: webpack
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 7, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants